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DETAILED ACTION 



1 . Claims 1 -33 are pending in tliis office action. 

2. Applicant's arguments, filed October 30, 2006, have been fully considered but 
they are not persuasive. 

Claim Rejections 

3. The text of those sections of Title 35, U.S. Code not included in this action can 
be found in a prior Office action. 



Claim Rejections - 35 USC § 102 
4. Claims 1-18 and 27-33 are rejected under 35 U.S.C. 102(e) as being anticipated 
by Walker et al. (U.S. Patent No. 6.546,492). 



Regarding claim 1 . Walker et al. teaches a system that supports secure 
communication of data between an electronic device and a network, the system 
comprising: 

• An electronic device comprising (fig. 1 , ref. num 22/30): 

o A first component that manages information in the electronic device (col. 
4, lines 53-64); and 
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o A second component that provides access to proprietary information in the 
electronic device (col. 4, lines 18-52); and 
• At least one server that manages the information communicated to the electronic 
device via the network (fig. 1 , ref. num 28), a first portion of information and a 
second portion of information being used to securely communicate data to the 
electronic device, the first portion of information and the second portion of 
information being managed by the at least one server and the first component to 
provide secure communication between the electronic device and the network 
(col. 4, lines 18-64 and fig. 2). 

Regarding claim 2 , Walker et al. teaches wherein the first portion of information is 
a portion of information dynamically sent to the electronic device (col. 4, lines 32-36). 

Regarding claim 3 , Walker et al. teaches wherein the first portion of information is 
communicated over a proprietary communication protocol (col. 3, lines 33-34). 

Regarding claim 4 , Walker et al. teaches wherein the second portion of 
information is a portion of static information available to the electronic device (col. 4. 
lines 40-44). 

Regarding claim 5 . Walker et aL teaches wherein the second portion of 
information is an electronic security number (ESN) (col. 1, lines 37-57). 
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Regarding claim 6 . Walker et al. teaches wherein the second portion of 
information is provided by a subscriber identity module (SIM) card (col. 3, lines 21-24). 

Regarding claim 7 . Walker et al. teaches wherein the first portion of information is 
combined with the second portion of information to generate encryption information (col. 
4, lines 36-39). 

Regarding claim 8 . Walker et al. teaches wherein the first portion of information 
comprises a first key and the second portion of information comprises a second key 
(col. 4, lines 32-40). 

Regarding claim 9 . Walker et al. teaches wherein the first component retrieves 
the first key from the at least one server (col. 4, lines 22-24). 

Regarding claim 10 . Walker et al. teaches wherein the at least one server sends 
the first key to the first component (col. 4, lines 22-24). 

Regarding claim 1 1 . Walker et al. teaches wherein the at least one server 
generates the first key (col. 4, lines 32-40). 



Regarding claim 12 . Walker et al. teaches wherein the first key is generated for 
the at least one server (col. 4, lines 32-40). 
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Regarding claim 13 , Walker et aL teaches wherein the first key and the second 
key are combined to provide a higher level of security in the system and the data 
communication between the electronic device and the network relative to using the first 
key and the second key separately (fig. 4, ref. num 84 and fig. 2, ref. num 38). 

Regarding claim 14 . Walker et al. teaches wherein the at least one server 
assembles a message that contains the first key and communicates the message to the 
electronic device (fig. 2, ref. num 38). 

Regarding claim 15 , Walker et al. teaches wherein the at least one server 
communicates with the electronic device via a proprietary communication protocol (fig. 
1 , ref. num 24). 

Regarding claim 16 , Walker et al. teaches wherein the electronic device 
processes the message to retrieve the first key (fig. 2, ref. num 46). 

Regarding claim 17 . Walker et al. teaches wherein the first component 
comprises: 

• A first agent that downloads data and information onto the electronic device (fig. 
3, ref. num 60); 

• A second agent that applies the downloaded data and information onto 
appropriate applications in the electronic device (fig. 3, ref. num 66); and 
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• A first manager that facilitates secure communications (fig. 2). 

Regarding claim 18 . Walker et al. teaches wherein the electronic device further 
comprises a third component that facilitates downloads performed by the second agent 
of the first component of the electronic device (fig. 3). 

Regarding claim 27 . Walker et al. teaches an electronic device comprising: 

• An integrated circuit card, wherein the electronic device performs secure 
firmware updates utilizing the integrated circuit card (fig. 1 , ref. num 22); 

• A first key, wherein the integrated circuit card provides the first key (col. 4, line 65 
through col. 5, line 11); and 

• Wherein the electronic device employs the first key to authenticate information 
for updating fimiware received from an external system (col. 5, lines 12-22). 

Regarding claim 28 . Walker et al. teaches further comprising: 

• A manager that manages a life cycle of the first key (fig. 1 , ref. num 30); and 

• Wherein the first manager is capable of being employed to at least one of encrypt 
data sent to the external system and decrypt data received from the external 
system (col. 4, lines 41-44). 



Regarding claim 29 . Walker et al. teaches wherein the external system 
comprises a management server (fig. 1 , ref. num 26). 



Application/Control Number: 1 0/695,71 3 Page 7 

Art Unit: 2136 

Regarding claim 30 . Walker et al. teaches wherein the electronic device decrypts 
Infomiation for updating firmware based on at least a portion of the first key, and 
wherein the information for updating firmware is provided by the external system (fig. 3, 
ref. num 60 and 66). 

Regarding claim 31 . Walker et al. teaches wherein the electronic device decrypts 
information for updating firmware based on at least a portion of the first key and at least 
a portion of a second key, and wherein the information for updating firmware is provided 
by the extemal system (fig. 6, ref. num 148, 154, and 158). 

Regarding claim 32 . Walker et al. teaches wherein the second key comprises a 
key that is one of received by the electronic device and computed by the electronic 
device (col. 4, lines 41-44). 

Regarding claim 33 . Walker et al. teaches wherein the integrated circuit card 
comprises one of a SIM card and a Smart card (col. 3, lines 21-25). 

Claim Rejections - 35 USC § 103 

5. Claims 19-26 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Walker et al. (USPN '492) in view of Veil (U.S. Patent No. 6,138,239). 
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Regarding claim 19 , Walker et al. teaches a method for securely communicating 
data and information between an electronic device and a network, the network 
comprising at least one server that manages communication via the network, the 
method comprising: 

• Storing a first security key (fig. 4, ref. num 82); 

• Receiving a message containing a second security key (fig. 4, ref. num 84); 

• Processing the received message (fig. 4, ref. num 88); and 

• Retrieving the second security key from the processed message (fig. 4, ref. num 
92). 

Walker et al. does not teach generating a third security key. 

Veil teaches generating a third security key (col. 15, lines 63-67). 

It would have been obvious to one of ordinary skill in the art, at the time the 
invention was made, to combine generating a third security key, as taught by Veil, with 
the method of Walker et al. It would have been obvious for such modifications because 
a session key provides a short lived key for secure communications between two 
devices. 
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Regarding claim 20 . Walker et al. as modified by Veil teaches wherein the 
electronic device combines the first security key and the second security key to 
generate the third security key (see col. 15, lines 63-67 of Veil). 

Regarding claim 21 . Walker et al. as modified by Veil teaches wherein the 
method further comprises employing the third security key for communication with the at 
least one server (see col. 15, lines 63-67 of Veil). 

Regarding claim 22 . Walker et al. as modified by Veil teaches wherein the at 
least one server utilizes a copy of the third security key to decrypt information received 
from the electronic device (see col. 1 1 , lines 20-42). 

Regarding claim 23 . Walker et al. as modified by VeH teaches wherein the 
electronic device utilizes the third security key to decrypt data received from the at least 
one server, (see fig. 5, ref. num 126 of Walker et al.). 

Regarding claim 24 . Walker et al. as modified by Veil teaches wherein the 
method further comprises performing a security check to verify an access activity from 
the electronic device (see col, 3, line 66 through col. 4, line 2 of Walker et al.). 
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Regarding claim 25 , Walker et al. as modified by Veil teaches wherein the 
access activity from the electronic device comprises a request for information (see col. 
3, lines 66-67 of Walker et al.). 

Regarding claim 26 , Walker et al. as modified by Veil teaches wherein the 
method further comprises processing the request of the electronic device (see col. 4, 
lines 1-2 of Walker et al.). 

Response to Arguments 

6. Applicant argues: 

a. Walker fails to teach a second component that provides access to 
proprietary information in the electronic device (page 7, last paragraph through 
page 8, first paragraph). 

b. Walker fails to teach an IC card that provides a first key (page 8, second 
and third paragraph). 

Regarding argument (a), examiner disagrees with applicant. The PC card 
provides access to file updates that are directed to a specific mobile unit (col. 5, lines I'- 
ll and col. 6, lines 18-36). The file updates are proprietary information because only 
that specific mobile unit can have access to the data. 

Regarding argument (b), examiner disagrees with applicant. Figure 4 (and 
accompanying description on column 5, lines 51-64), of Walker, describes, in another 
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embodiment, tlie IC card creating a public/private key pair and providing tfie public key 
to tlie electronic device (computer) and ultimately to the authentication server. 

Conclusion 

7. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action Is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brandon S. Hoffman whose telephone number is 571- 

272- 3863. The examiner can normally be reached on M-F 8:30 - 5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser G. Moazzami can be reached on 571-272-4195. The fax phone 
numbier for the organization where this application or proceeding is assigned is 571- 

273- 8300. 
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Information regarding tlie status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status infomiation for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more infomiation about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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